Network Security

Hi there,Typically, our remote office has a WAN router with T1 Internet connection.  Then, we put an ASA behind the router LAN for firewall/NAT those kind of function.Recently, we are planning to replace the T1 Internet connection with Ethernet 10Mbp...

I am looking for a Cisco 5505 ASA that I can use IP SLA to perform internet failover between 2x internet connections connected to the ASA.  My question is there used to be an ASA license that only allowed 2 VLANs to pass traffic at the same time (alt...

HiI have a customer that has to perform an upgrade in their deployed ASA appliances, we gave them an ASA for testing but it has the 8.4.2 version and they need the 8.2.1 for performing their local tests, is there any guideline to perform this?ThanksA...

I am building out 2 virtual firewalls using contexts in an active/active F/O pair, and would like to know if it is necessary to assign at least one interface to the admin context?My other contexts will have outside, inside, DMZ and stateful F/O inter...

Hi,I am planning for an VSS in Core but firstly I need to upgrade FWSM which is at 3.2 Ver to 4.0.4 (min release) I have checked software dependenciesbut not sure about Hardware Dependency  on Fwsm and Chassis for Eg. Rommon Upgrade on Chassis. Pleas...

I have been having problems accessing hosts connected via the inside interface on an ASA 5520.  The thought just occured to me that the interfaces are gigabit ethernet and the outbound connection is an 100 mb connection.  Could this be the cause of m...

I have branch office having subnet 172.26.48.0/22 one ip from this subnet say 172.26.48.100 assigned toa server . now our erequirement to access this server from outside mean from internet . tis branch office is coonected throuth leased line to main ...

Hello together, perhaps somebody had the same problem and found a way to solve it. We access our customer-networks over IPsec-Tunnel with D-Nat:Our Site is hidden behind a single Address (Service-Pat), the remote sites are accessed over /27 networks,...

I have successfully been able to allow outbound access from inbound hosts  on the appliance; however, I have only one outbound IP address and had to configure outbound access using static PAT.  What I need to do is to configure access to certain inbo...

HelloMy config:ip inspect name CBAC tcp timeout 10ip inspect max-incomplete high 100int fa0/1ip access_group permit_all inint fa 0/2ip access_group permit_all inip inspect CBAC inAccess-list on both interfaces accept all ip traffic.What happens when:...

Hi, I am trying to allow SIP communication through our Cisco ASA firewall but I get the following error in the logs. It's almost like looping with these two error message. I have removed Inspect SIP from the global policy map and configured it under ...

Hello,We can´t reach DMZ servers from other DMZ servers. It's very strange.If I make a ping from DMZ server to another, sometimes only recieve one ping, sometimes 4, sometimes 0.How can I allow the traffic between DMZ servers??(ASA 5520 Version 8.4)R...